CVE-2024-49528

🗓️ 12 Nov 2024 16:14:24Reported by adobeType

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Adobe Animate 23.x < 23.0.8 / 24.x < 24.0.5 Multiple Vulnerabilities (APSB24-76)	8 Oct 202400:00	–	nessus
Tenable Nessus	Adobe Animate 23.x < 23.0.8 / 24.x < 24.0.5 Multiple Vulnerabilities (APSB24-76)	8 Oct 202400:00	–	nessus
Circl	CVE-2024-49528	12 Nov 202416:34	–	circl
CNNVD	Adobe Animate 缓冲区错误漏洞	12 Nov 202400:00	–	cnnvd
CNVD	Adobe Animate Buffer Overflow Vulnerability (CNVD-2024-46804)	15 Nov 202400:00	–	cnvd
Cvelist	CVE-2024-49528 Animate \| Out-of-bounds Write (CWE-787)	12 Nov 202416:14	–	cvelist
EUVD	EUVD-2024-43460	3 Oct 202520:07	–	euvd
NVD	CVE-2024-49528	12 Nov 202417:15	–	nvd
Positive Technologies	PT-2024-33545 · Adobe · Animate	12 Nov 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-49528 Animate \| Out-of-bounds Write (CWE-787)	12 Nov 202416:14	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

adobe animateRange<23.0.8

adobe animateRange24.0.0–24.0.5

AND

apple macosMatch-

microsoft windowsMatch-

[
  {
    "defaultStatus": "affected",
    "product": "Animate",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "24.0.4",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/animate/apsb24-76.html

18 Nov 2024 18:34Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8

EPSS0.00354

SSVC

CWE-787